CrowdStrike Falcon Endpoint Protection Platform Features

Orchestration (4)

Asset Management: Lets users group and organize their endpoints to gather threat intelligence on specific technologies. 69 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Security Workflow Automation: Based on 69 CrowdStrike Falcon Endpoint Protection Platform reviews. Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information.
Deployment: Based on 74 CrowdStrike Falcon Endpoint Protection Platform reviews. The process in which users integrate their existing security systems and endpoints to the threat intelligence platform.
Sandboxing: A feature that allows security testing and information gathering to occur in a secure, resource independent environment. This feature was mentioned in 69 CrowdStrike Falcon Endpoint Protection Platform reviews.

Information (3)

Proactive Alerts: Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered. 77 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Malware Detection: As reported in 80 CrowdStrike Falcon Endpoint Protection Platform reviews. Provides multiple techniques and information sources to alert users of malware occurrences.
Intelligence Reports: As reported in 78 CrowdStrike Falcon Endpoint Protection Platform reviews. The ability for users to produce reports outlining detailed and personalized threat information

Personalization (3)

Endpoint Intelligence: Analysis for users to examine threat intelligence data specific to their endpoint devices. This feature was mentioned in 78 CrowdStrike Falcon Endpoint Protection Platform reviews.
Security Validation: The product has a recurring examination process to update your intelligence reports as new threats emerge. This feature was mentioned in 78 CrowdStrike Falcon Endpoint Protection Platform reviews.
Dynamic/Code Analysis: The ability to examine your application, website, or database's code to uncover zero-day vulnerabilities. 69 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.

Network Management (3)

Activity Monitoring: Based on 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.
Asset Management: Based on 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Keeps records of each network asset and its activity. Discovers new assets accessing the network.
Log Management: Based on 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Provides security information and stores the data in a secure repository for reference.

Incident Management (3)

Event Management: Based on 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Alerts users of incidents and allows users to intervene manually or triggers an automated response.
Automated Response: As reported in 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Incident Reporting: Documents cases of abnormal activity and compromised systems. 13 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.

Security Intelligence (4)

Threat Intelligence: Stores information related to common threats and how to resolve them once incidents occur. This feature was mentioned in 13 CrowdStrike Falcon Endpoint Protection Platform reviews.
Vulnerability Assessment: Analyzes your existing network and IT infrastructure to outline access points that can be easily compromised. This feature was mentioned in 13 CrowdStrike Falcon Endpoint Protection Platform reviews.
Advanced Analytics: Based on 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Allows users to customize analytics with granulized metrics that are pertinent to your specific resources.
Data Examination: Based on 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Allows users to search databases and incident logs to gain insights on vulnerabilities and incidents.

Administration (5)

Compliance: Monitors assets and enforces security policies to audit assets and infrastructure security. 72 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Web Control: Based on 68 CrowdStrike Falcon Endpoint Protection Platform reviews. Filters websites and manages whitelisting to enforce compliance protocols for users accessing the internet within the network.
Application Control: As reported in 72 CrowdStrike Falcon Endpoint Protection Platform reviews. Blocks endpoint users from accessing restricted applications.
Asset Management: Based on 73 CrowdStrike Falcon Endpoint Protection Platform reviews. Keeps records of each network asset and its activity. Discovers new assets accessing the network.
Device Control: Based on 74 CrowdStrike Falcon Endpoint Protection Platform reviews. Manages user network accessibility on laptops and mobile devices.

Functionality (4)

System Isolation: Cuts off network connection or temporarily inactivate applications until incidents are remedied. This feature was mentioned in 82 CrowdStrike Falcon Endpoint Protection Platform reviews.
Firewall: Protects endpoint devices from a variety of attacks and malware threats. This feature was mentioned in 72 CrowdStrike Falcon Endpoint Protection Platform reviews.
Endpoint Intelligence: Analysis for users to examine threat intelligence data specific to their endpoint devices. 78 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Malware Detection: Provides multiple techniques and information sources to alert users of malware occurrences. 83 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.

Analysis (7)

Automated Remediation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly. 80 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Incident Reports: Produces reports detailing trends and vulnerabilities related to their network and infrastructure. 77 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Behavioral Analysis: As reported in 79 CrowdStrike Falcon Endpoint Protection Platform reviews. Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.
Continuous Analysis: Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
Behavioral Analysis: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.
Data Context: Provide insights into why trends are occurring and what issues could be related.
Activity Logging: Monitors, records, and logs both real-time and post-event activity.

Detection (3)

ServiceNow Apps (2)

Detection & Response (4)

Response Automation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly. 54 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Threat Hunting: As reported in 55 CrowdStrike Falcon Endpoint Protection Platform reviews. Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Rule-Based Detection: Allows administrators to set rules specified to detect issues related to issues such as sensitive data misuse, system misconfiguration, lateral movement, and/or non-compliance. This feature was mentioned in 55 CrowdStrike Falcon Endpoint Protection Platform reviews.
Real-Time Detection: As reported in 56 CrowdStrike Falcon Endpoint Protection Platform reviews. Constantly monitors system to detect anomalies in real time.

Management (3)

Extensibility: Allows for customized support for hybrid environments This feature was mentioned in 55 CrowdStrike Falcon Endpoint Protection Platform reviews.
Workflow Automation: Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process. This feature was mentioned in 52 CrowdStrike Falcon Endpoint Protection Platform reviews.
Unified Visibility: Based on 52 CrowdStrike Falcon Endpoint Protection Platform reviews. Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.

Analytics (3)

Threat Intelligence: As reported in 56 CrowdStrike Falcon Endpoint Protection Platform reviews. Stores information related to common threats and how to resolve them once incidents occur.
Artificial Intelligence & Machine Learning: Facilitates Artificial Intelligence (AI) such as Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis. This feature was mentioned in 55 CrowdStrike Falcon Endpoint Protection Platform reviews.
Data Collection: As reported in 56 CrowdStrike Falcon Endpoint Protection Platform reviews. Collects information from multiple sources to cross reference and build contextual to correlate intelligence.

Monitoring (5)

Investigate: As reported in 22 CrowdStrike Falcon Endpoint Protection Platform reviews. Investigate identity threats with contextual user information.
Monitoring: Based on 22 CrowdStrike Falcon Endpoint Protection Platform reviews. Monitor & detect malicous identity and privileges activity
Misconfigurations: Identify identity-related misconfigurations. This feature was mentioned in 21 CrowdStrike Falcon Endpoint Protection Platform reviews.
Integrate: Offers integrations to identity store providers. This feature was mentioned in 22 CrowdStrike Falcon Endpoint Protection Platform reviews.
Visability: Provide full coverage of identity estate with granular detail. 21 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.

Remediation (2)

Platform Features (7)

24/7 support: Based on 17 CrowdStrike Falcon Endpoint Protection Platform reviews. Provides 24/7 support to customers with technical questions.
Proactive report alerts: As reported in 18 CrowdStrike Falcon Endpoint Protection Platform reviews. Proactively sends reports or alerts to customers.
Application control: As reported in 18 CrowdStrike Falcon Endpoint Protection Platform reviews. Lets users detect and block applications that are not a security threat.
Proactive threat hunting: Proactively hunts threats. 17 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Rapid response time: Based on 18 CrowdStrike Falcon Endpoint Protection Platform reviews. Provides rapid reponse time to cyber threats.
Customizeable reports: Based on 17 CrowdStrike Falcon Endpoint Protection Platform reviews. Provides the ability to customize reports.
Managed Services: Offers MDR as a service.

Automation Capabilities (3)

Automated remediation: Ability to automatically neutralize or eliminate active vulnerabilities. 17 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Automated investigation: Ability to automatically investigate networks and endpoints for threats. This feature was mentioned in 18 CrowdStrike Falcon Endpoint Protection Platform reviews.
AI Agents: Utilizes AI agents for detection and response tasks.

Generative AI (7)

AI Text Generation: Allows users to generate text based on a text prompt. 32 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
AI Text Summarization: Based on 32 CrowdStrike Falcon Endpoint Protection Platform reviews. Condenses long documents or text into a brief summary.
AI Text Summarization: Based on 23 CrowdStrike Falcon Endpoint Protection Platform reviews. Condenses long documents or text into a brief summary.
AI Text Summarization: Condenses long documents or text into a brief summary. 25 reviewers of CrowdStrike Falcon Endpoint Protection Platform have provided feedback on this feature.
Generate Attack Scenarios: Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets.
Generate Threat Detection Rules: Use AI to automatically create detection rules based on observed patterns.
Generate Threat Summaries: Use AI to produce concise summaries of complex threat reports or alerts.

Agentic AI - Threat Intelligence (4)

Autonomous Task Execution: Based on 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Capability to perform complex tasks without constant human input
Multi-step Planning: As reported in 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Ability to break down and plan multi-step processes
Proactive Assistance: Anticipates needs and offers suggestions without prompting This feature was mentioned in 13 CrowdStrike Falcon Endpoint Protection Platform reviews.
Decision Making: Based on 13 CrowdStrike Falcon Endpoint Protection Platform reviews. Makes informed choices based on available data and objectives

Agentic AI - Security Information and Event Management (SIEM) (4)

Agentic AI - User and Entity Behavior Analytics (UEBA) (4)

Agentic AI - Extended Detection and Response (XDR) Platforms (3)

Autonomous Task Execution: Capability to perform complex tasks without constant human input This feature was mentioned in 10 CrowdStrike Falcon Endpoint Protection Platform reviews.
Proactive Assistance: Anticipates needs and offers suggestions without prompting This feature was mentioned in 10 CrowdStrike Falcon Endpoint Protection Platform reviews.
Decision Making: Makes informed choices based on available data and objectives This feature was mentioned in 10 CrowdStrike Falcon Endpoint Protection Platform reviews.